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ABSTRACT OF THE INVENTION 

In a network computing environment, a user-centric system and method for 
controlling access to user-specific information maintained in association with a web- 
services service. When a web-services client desires access to the user-specific 
information, the client sends a request. The request identifies the reasons/intentions for 
accessing the desired information. The request is compared to the user's existing access 
permissions. If there is no existing access permission, the request is compared to the 
user's default preferences. If the default preferences permit the requested access, an 
access rule is created dynamically and the client's request is filled, without interrupting 
the user. If the default preferences do not permit the request to be filled, a consent user 
interface may be invoked. The consent user interface presents the user with one or more 
consent options, thereby permitting the user to control whether the client will be given 
access to the user-specific information. 
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